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(54) DISTRIBUTED DENIAL OF SERVICE ATTACK PREVENTING METHOD. GATE DEVICE. 
COMMUNICATION DEVICE, AND PROGRAM 

(57)Abstract: 

PROBLEM TO BE SOLVED: To limit the transmission 
band of offensive traffic for a distributed denial of 
service (DDoS) attack while securing communication 
traffic for regular users. 

SOLUTION: When the suspicious offensive packet of the 
DDoS attack is detected, a gate device 2001 transmits 
the suspicious signature and the regular condition of the 
suspicious offensive packet to upstream communication 
devices 2002 and 2003. Each of the communication 
devices 2002 and 2003 cancels the transmission band 
limitation of the packet identified from the regular 
condition and a regular signature created based upon the 
suspicious signature while limiting the transmission band 
of the packet identified from the suspicious signature- 
Further, each of the communication devices 2003 and 
2003 transmits the suspicious signature and the regular 
condition to further upstream communication devices to 
report the suspicious signature and the regular condition 
to the upper- most stream communication device in the 
recursive manner and each communication device further limits the band by detecting the 
offensive packet from the suspicious offensive packets while implementing the band limitation of 
the suspicious offensive packet. 
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13 

[0 0 2 8] rC-C. y-hS^a2 0 0 1&l/aSft3S« 
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sr^i-:7 o-^^— h^tj^m 9 <oy- h»a 2001^ 

U^il{t3^a2 002 — 2006 <^^IE h 7 t: yi^^tti^ 
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[0 04 41 giClc:, ilitSS 7 0 0 1 rtOteiS^Ha 7 
0 2 l;65v>;0^tc:LX/'^'5r.y htc^rSM® {r^^^rf 
3- K^ii^-r5;e)\ ^^t^fifeoiHf ^atcffii^-r^ 
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$n6t>C0-CfeoTt>SV^U. fe^V>mSP (Intern 
et Service Provider. -TV h^KJg^l^— t':5^liW 

ib\ la 1 3 tC:^-r^J-C*l. 7 0 5 1 O I 

PTKW;^!* ri. 2. 3. 4 J -e$>5o WT-c«> ^ 

-1fA;65. TiJ^-r^f KA5:il{t3^H7 0 0 ilc:^ 
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i:>'h<^mmtm^mt^^fS.'r^o ^ur (2) -e^-r 
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